Ionut Arghire

Insufficient validation of user input allows an attacker to gain access to the underlying OS and elevate their privileges to root.

Atlassian and Splunk have released patches for critical vulnerabilities, including dozens of flaws in third-party dependencies.

These servers are regularly targeted by China-linked UNC6508 for initial access and backdoor deployment.

Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame.

The hackers exfiltrated data from Salesforce instances of Klue customers, such as Huntress and Recorded Future.

The large-scale credential theft campaign hit roughly half of the internet-accessible Fortinet firewalls and VPNs.

CryptoBandits uses a local SOCKS5 proxy for traffic routing, blending data theft with remote code execution.

Fortinet says the FortiBleed credential-harvesting campaign relies on logins from previous incidents, not on new vulnerabilities.

North Korean APT Sapphire Sleet has been blamed for compromising over 140 NPM packages across the Mastra AI framework ecosystem.

Hackers are exploiting a vulnerability in the Gravity SMTP WordPress plugin to extract configuration data, including API keys and tokens.